    :pp_apptier          "1.3.6.1.4.1.34380.1.1.24"
    :pp_hostname         "1.3.6.1.4.1.34380.1.1.25"
    :pp_authorization    "1.3.6.1.4.1.34380.1.3.1"
-   :pp_auth_role        "1.3.6.1.4.1.34380.1.3.13"})
+   :pp_auth_role        "1.3.6.1.4.1.34380.1.3.13"
+   :pp_cli_auth         cli-auth-oid})
 
 (def netscape-comment-value
   "Standard value applied to the Netscape Comment extension for certificates"

(def ppAuthCertExt
  "The OID for the extension with shortname 'ppPrivCertExt'."
  "1.3.6.1.4.1.34380.1.3")

(def puppet-short-names
  "A mapping of Puppet extension short names to their OIDs. These appear in

  [extension :- Extension]
  (let [oid (:oid extension)]
    (or
      (and (utils/subtree-of? ppAuthCertExt oid) (not (= cli-auth-oid oid)))
      (utils/subtree-of? ppRegCertExt oid)
      (utils/subtree-of? ppPrivCertExt oid))))

